feat(ai, ai-harness, ai-mcp): one redaction sink, the final tool result in the log, secret answers by reference, and single-flight OAuth refresh by AlemTuzlak · Pull Request #1815 · TanStack/ai

feat(ai): CredentialStore compare-and-set pair, readCredentialEntry, and one scrubSecrets

AlemTuzlak

committed

526a787

Merge branch 'feat/harness-log-session' into feat/harness-redaction

AlemTuzlak

committed

1b18536

feat(ai-harness): one redactor per session for log records, feed events, plugin state, notes, and the model context

AlemTuzlak

committed

b4af9dc

feat(ai-harness): the log keeps the final tool result the model saw, and errors and step results leave the session scrubbed

AlemTuzlak

committed

36e8134

Merge branch 'feat/harness-log-session' into feat/harness-redaction

AlemTuzlak

committed

ad83aff

feat(ai-harness): a secret answer sent to another host goes through the credential store as a one-time reference

AlemTuzlak

committed

7c13e0f

test(e2e): a secret answer sent to another host never shows in the transcript, the events, the log, or the model input

AlemTuzlak

committed

9ca6284

feat(ai-harness, ai-mcp): OAuth refresh runs once per host, saves with compare-and-set to the scope it came from, and keeps the client registration

AlemTuzlak

committed

bc35162

docs(ai, ai-harness, ai-mcp): redaction, secret answers across hosts, the final tool result, OAuth refresh, and the CredentialStore compare-and-set pair

AlemTuzlak

committed

36f40df

Merge branch 'feat/harness-log-session' into feat/harness-redaction

AlemTuzlak

committed

a7cc5c1

Navigation Menu

Repository navigation

feat(ai, ai-harness, ai-mcp): one redaction sink, the final tool result in the log, secret answers by reference, and single-flight OAuth refresh - #1815

feat(ai, ai-harness, ai-mcp): one redaction sink, the final tool result in the log, secret answers by reference, and single-flight OAuth refresh#1815
AlemTuzlak merged 16 commits into
feat/harness-log-sessionfrom
feat/harness-redaction

Commits on Oct 17, 2026

feat(ai): CredentialStore compare-and-set pair, readCredentialEntry, and one scrubSecrets

Merge branch 'feat/harness-log-session' into feat/harness-redaction

feat(ai-harness): one redactor per session for log records, feed events, plugin state, notes, and the model context

feat(ai-harness): the log keeps the final tool result the model saw, and errors and step results leave the session scrubbed

Merge branch 'feat/harness-log-session' into feat/harness-redaction

feat(ai-harness): a secret answer sent to another host goes through the credential store as a one-time reference

test(e2e): a secret answer sent to another host never shows in the transcript, the events, the log, or the model input

feat(ai-harness, ai-mcp): OAuth refresh runs once per host, saves with compare-and-set to the scope it came from, and keeps the client registration

docs(ai, ai-harness, ai-mcp): redaction, secret answers across hosts, the final tool result, OAuth refresh, and the CredentialStore compare-and-set pair

Merge branch 'feat/harness-log-session' into feat/harness-redaction

Commits on Oct 20, 2026

feat(ai, ai-harness, ai-mcp, ai-acp, ai-harness-cli): durable waits in the log, at the boundary, in background runs, and on every transport (#1817)

feat(ai): add lastChatMiddleware to SubagentBinding, and the secret_answer credential type

fix(ai-harness): keep secrets out of step values, agent middleware, and secret answer rows

fix(ai-mcp): ask for a sign-in when the user signs out while the SDK refreshes a token

test(e2e): run the harness secret answer route against aimock

docs(ai-harness): narrow credentials on oauth, so the secret_answer kind type-checks